Error: rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
File:                     D95F78E630398477E9BAE976B3EAEDB0059994DB.mft (raw, json)
Hash identifier:          FBa0qtdw/RiGxBxitdoY8xT3kdzhsUf3VkidYJdUbVY=
Subject key identifier:   0F:32:49:A1:98:62:BA:65:31:83:19:33:49:22:0C:7B:63:7F:EC:31
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       2BB851C7A653119423334CB910C1AAB58E4DA3F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
Manifest number:          04D0
Signing time:             Fri 16 Oct 2026 20:41:09 +0000
Manifest this update:     Fri 16 Oct 2026 20:36:09 +0000
Manifest next update:     Sun 18 Oct 2026 00:23:09 +0000
Files and hashes:         1: 323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (hash: fvE9pXgMUp8SZiwt8yaIdBGzsVv1q58Rcf6C14Lu/5o=)
                          2: 323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (hash: 10grmYgRlb0SS90IyJSUVWSNmVEKOcdAfRyd6LTqChc=)
                          3: 323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (hash: FLXGaKLJIXT/ztk+GQ6KZbmG3HuPwYPyDxg5J/txsdc=)
                          4: 323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (hash: pBXGSP6xBS4tQHTcAxyiO8BZnw2+dfsHagzia0t4r8Q=)
                          5: 323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (hash: smxTkQ5o90PQIFi81VarJKZNQHmklJJsnDJFMVfj0wE=)
                          6: 323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (hash: DuW5wKAhp6//rvLyFaiDLnhGVFbnp+HRsMbcYUl+N/0=)
                          7: 34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (hash: 8h0SoQa+zHvg8ypoewsh82jRvTmx1mn+k+sbaBCNSRE=)
                          8: 34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (hash: LlOYaEoeqHrYA4xy9Bq+IRx20dAH+42ivQxYifmQVg0=)
                          9: D95F78E630398477E9BAE976B3EAEDB0059994DB.crl (hash: D//9ZUQAWga3OzDWJ6MkY4S/CUEbr83isbZwMddKXKY=)
                          10: 34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (hash: XIHUqLSBSkh+uND0iH7PeZcXzivXfes80WQfvk2csrw=)
                          11: 323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (hash: HbK+I93CH0OZ8rMeXWbavpKRDyz849KcbyrzE/f1W8c=)
                          12: 34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (hash: 3Y2YOrZBZpyxSvI1zOvxfut2UD/6PFOwe1gjuKLm17s=)
                          13: 323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (hash: e7p2Z+92+MzlvClpqyoaCVFz9q8M+GOdOURvPxj59zU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 00:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b8:51:c7:a6:53:11:94:23:33:4c:b9:10:c1:aa:b5:8e:4d:a3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Oct 16 20:36:09 2026 GMT
            Not After : Oct 18 00:23:09 2026 GMT
        Subject: CN=0F3249A19862BA653183193349220C7B637FEC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:8d:0a:5e:ab:28:e7:89:d8:01:49:a7:37:
                    67:aa:47:fc:a5:9e:a3:d8:df:00:55:8e:e7:ae:95:
                    00:45:e5:19:ba:f5:13:aa:5f:20:1a:a0:59:0c:b9:
                    a4:18:9f:a0:42:92:d7:3a:70:25:88:ac:f9:27:37:
                    89:64:cd:3e:94:6e:15:f4:e4:28:42:5b:f8:2b:ff:
                    c9:4a:a9:a2:d4:14:54:fa:15:cd:38:46:77:99:e1:
                    30:e1:49:a8:f1:d8:2f:b6:16:31:ec:9a:92:36:c4:
                    65:ae:5e:03:71:4f:0f:cf:0b:cd:2b:08:de:b3:2b:
                    08:59:8a:a6:70:30:48:c7:1f:00:2e:c9:cf:df:36:
                    e1:78:d7:3c:f9:ce:49:fb:72:e1:44:22:3a:20:20:
                    c4:c6:3a:82:55:ee:27:a1:76:98:29:19:fb:96:c4:
                    7e:e6:30:f7:6d:09:ba:39:7b:93:68:01:b7:1e:74:
                    a7:ea:35:ee:b6:b2:91:d1:da:e9:98:a9:ff:c4:2f:
                    81:5d:e8:d4:d2:63:d0:c3:bf:03:e7:68:0e:da:7a:
                    35:37:1e:fb:a2:84:93:10:25:00:03:fb:73:60:6a:
                    5d:4a:8a:80:3e:77:d2:6c:91:2e:54:80:82:02:10:
                    be:07:65:c2:24:4f:a7:31:12:c6:c8:08:e8:bb:1f:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:49:A1:98:62:BA:65:31:83:19:33:49:22:0C:7B:63:7F:EC:31
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:52:64:ed:ad:a9:ee:76:90:9e:e0:fa:d0:ea:76:30:d9:58:
         54:8d:1f:c1:f0:88:17:16:b5:80:17:41:29:7f:22:bd:4f:a3:
         71:2a:f5:75:e1:31:b6:ab:82:25:a9:a1:61:9d:60:75:18:80:
         26:97:75:c3:c5:0a:bd:80:3c:52:e9:5c:ca:18:59:7c:75:e3:
         55:28:92:3e:73:42:7a:16:74:d1:69:92:bf:d4:83:55:f8:0e:
         58:d2:4d:d7:ab:b1:b1:0c:8d:3a:5a:b6:70:e9:ae:fe:fc:94:
         b4:67:1e:bb:a3:33:e8:c7:ac:92:7f:50:fc:34:23:64:67:33:
         f2:d3:29:6c:f2:d8:5d:88:b8:fb:dc:dc:05:90:8c:45:67:fb:
         03:b6:a9:a8:74:eb:3c:7e:44:a4:c6:d8:65:82:0e:bb:1f:f8:
         2b:da:7d:c6:18:79:14:e1:09:86:db:c1:bd:fd:75:bc:2d:b3:
         85:b0:55:c1:04:27:83:01:bf:57:ba:db:f9:d2:6e:1e:9d:11:
         13:23:2c:88:1d:12:c7:00:35:90:48:cd:f0:4c:18:ef:1d:ce:
         5a:12:cb:4b:41:0c:9a:94:d5:67:c6:7b:c8:f5:a0:2e:ba:c6:
         29:eb:bc:24:d9:e5:3a:44:98:88:6a:f9:8f:16:cd:16:a2:40:
         0e:c0:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:06:37 2026 by rpki-client